Cyberfeed6 › Vendors › Google
CISA lists 76 Google vulnerabilities as exploited in real attacks. Most entries concern Chromium V8, Chromium, Pixel, Chromium Mojo.
Showing the 40 most recently added of 76. Check the vendor notice before you act: it names the fixed versions.
| Vulnerability | Product | Added to list | Severity | Ransomware | Fix |
|---|---|---|---|---|---|
| CVE-2026-111497Google Brotli Unchecked Return Value Vulnerability | Brotli | 2026-10-27 | Critical (9.2) | No | Vendor notice |
| CVE-2026-58704Google Pixel Improper Authorization Vulnerability | Pixel | 2026-09-16 | High (8.8) | No | Vendor notice |
| CVE-2026-87491Google Chromium V8 Out of Bounds Write Vulnerability | Chromium V8 | 2026-09-09 | High (8.8) | No | Vendor notice |
| CVE-2026-85046Google Chromium V8 Type Confusion Vulnerability | Chromium V8 | 2026-09-04 | High (8.8) | No | Vendor notice |
| CVE-2026-11645Google Chromium V8 Out-of-Bounds Read and Write Vulnerability | Chromium V8 | 2026-06-09 | High (8.8) | No | Vendor notice |
| CVE-2026-5281Google Dawn Use-After-Free Vulnerability | Dawn | 2026-04-01 | High (8.8) | No | Vendor notice |
| CVE-2026-3910Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability | Chromium V8 | 2026-03-13 | High (8.8) | No | Vendor notice |
| CVE-2026-3909Google Skia Out-of-Bounds Write Vulnerability | Skia | 2026-03-13 | High (8.8) | No | Vendor notice |
| CVE-2026-2441Google Chromium CSS Use-After-Free Vulnerability | Chromium | 2026-02-17 | High (8.8) | No | Vendor notice |
| CVE-2025-14174Google Chromium Out of Bounds Memory Access Vulnerability | Chromium | 2025-12-12 | High (8.8) | No | Vendor notice |
| CVE-2025-13223Google Chromium V8 Type Confusion Vulnerability | Chromium V8 | 2025-11-19 | High (8.8) | No | Vendor notice |
| CVE-2025-10585Google Chromium V8 Type Confusion Vulnerability | Chromium V8 | 2025-09-23 | High (8.8) | No | Vendor notice |
| CVE-2025-6558Google Chromium ANGLE and GPU Improper Input Validation Vulnerability | Chromium | 2025-07-22 | High (8.8) | No | Vendor notice |
| CVE-2025-6554Google Chromium V8 Type Confusion Vulnerability | Chromium V8 | 2025-07-02 | High (8.1) | No | Vendor notice |
| CVE-2025-5419Google Chromium V8 Out-of-Bounds Read and Write Vulnerability | Chromium V8 | 2025-06-05 | High (8.8) | No | Vendor notice |
| CVE-2025-2783Google Chromium Mojo Sandbox Escape Vulnerability | Chromium Mojo | 2025-03-27 | High (8.3) | No | Vendor notice |
| CVE-2024-7965Google Chromium V8 Inappropriate Implementation Vulnerability | Chromium V8 | 2024-08-28 | High (8.8) | No | Vendor notice |
| CVE-2024-7971Google Chromium V8 Type Confusion Vulnerability | Chromium V8 | 2024-08-26 | High (8.8) | No | Vendor notice |
| CVE-2024-5274Google Chromium V8 Type Confusion Vulnerability | Chromium V8 | 2024-05-28 | High (8.3) | No | Vendor notice |
| CVE-2024-4947Google Chromium V8 Type Confusion Vulnerability | Chromium V8 | 2024-05-20 | Critical (9.6) | No | Vendor notice |
| CVE-2024-4761Google Chromium V8 Out-of-Bounds Memory Write Vulnerability | Chromium V8 | 2024-05-16 | High (8.3) | No | Vendor notice |
| CVE-2024-4671Google Chromium Visuals Use-After-Free Vulnerability | Chromium | 2024-05-13 | Critical (9.6) | No | Vendor notice |
| CVE-2023-4762Google Chromium V8 Type Confusion Vulnerability | Chromium V8 | 2024-02-06 | High (8.8) | No | Vendor notice |
| CVE-2024-0519Google Chromium V8 Out-of-Bounds Memory Access Vulnerability | Chromium V8 | 2024-01-17 | High (8.8) | No | Vendor notice |
| CVE-2023-7024Google Chromium WebRTC Heap Buffer Overflow Vulnerability | Chromium WebRTC | 2024-01-02 | High (8.8) | No | Vendor notice |
| CVE-2023-6345Google Skia Integer Overflow Vulnerability | Chromium Skia | 2023-11-30 | Critical (9.6) | No | Vendor notice |
| CVE-2023-5217Google Chromium libvpx Heap Buffer Overflow Vulnerability | Chromium libvpx | 2023-10-02 | High (8.8) | No | Vendor notice |
| CVE-2023-4863Google Chromium WebP Heap-Based Buffer Overflow Vulnerability | Chromium WebP | 2023-09-13 | High (8.8) | No | Vendor notice |
| CVE-2023-3079Google Chromium V8 Type Confusion Vulnerability | Chromium V8 | 2023-06-07 | High (8.8) | No | Vendor notice |
| CVE-2023-2136Google Chrome Skia Integer Overflow Vulnerability | Chromium Skia | 2023-04-21 | Critical (9.6) | No | Vendor notice |
| CVE-2023-2033Google Chromium V8 Type Confusion Vulnerability | Chromium V8 | 2023-04-17 | High (8.8) | No | Vendor notice |
| CVE-2022-3038Google Chromium Network Service Use-After-Free Vulnerability | Chromium Network Service | 2023-03-30 | High (8.8) | No | Vendor notice |
| CVE-2022-4262Google Chromium V8 Type Confusion Vulnerability | Chromium V8 | 2022-12-05 | High (8.8) | No | Vendor notice |
| CVE-2022-4135Google Chromium GPU Heap Buffer Overflow Vulnerability | Chromium GPU | 2022-11-28 | Critical (9.6) | No | Vendor notice |
| CVE-2022-3723Google Chromium V8 Type Confusion Vulnerability | Chromium V8 | 2022-10-28 | High (8.8) | No | Vendor notice |
| CVE-2022-3075Google Chromium Mojo Insufficient Data Validation Vulnerability | Chromium Mojo | 2022-09-08 | Critical (9.6) | No | Vendor notice |
| CVE-2022-2856Google Chromium Intents Insufficient Input Validation Vulnerability | Chromium Intents | 2022-08-18 | Medium (6.5) | No | Vendor notice |
| CVE-2021-30533Google Chromium PopupBlocker Security Bypass Vulnerability | Chromium PopupBlocker | 2022-06-27 | Medium (6.5) | No | |
| CVE-2019-5825Google Chromium V8 Out-of-Bounds Write Vulnerability | Chromium V8 | 2022-06-08 | Medium (6.5) | No | |
| CVE-2018-6065Google Chromium V8 Integer Overflow Vulnerability | Chromium V8 | 2022-06-08 | High (8.8) | No |
Source: CISA Known Exploited Vulnerabilities catalog, released 2026-11-04. Severity scores are CVSS where available. "Ransomware" means CISA has marked the flaw as known to be used in ransomware campaigns.